Description
Jenkins Azure PublisherSettings Credentials Plugin 1.2 and earlier stored credentials unencrypted in the credentials.xml file on the Jenkins master where they could be viewed by users with access to the master file system.
Remediation
References
http://www.securityfocus.com/bid/108045
https://jenkins.io/security/advisory/2019-04-17/#SECURITY-844
Related Vulnerabilities
CVE-2021-32853 Vulnerability in npm package erxes
CVE-2021-21307 Vulnerability in maven package org.lucee:lucee
CVE-2021-3827 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2018-9206 Vulnerability in npm package blueimp-file-upload
CVE-2023-49371 Vulnerability in maven package com.ruoyi:ruoyi